skills.rest
RedBeret
RedBeretCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Audit codebases for vulnerabilities and hardcoded secrets using grep, bandit, and dependency scanners.

Updated Aug 23, 2026
Search Tags:#code review#security#vulnerability#owasp#audit#secrets
One-click install
npx skills add https://github.com/RedBeret/agent-skill-catalog --skill security-audit-redberet
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/RedBeret/agent-skill-catalog/tree/main/skills/security-audit
Command: npx skills add https://github.com/RedBeret/agent-skill-catalog --skill security-audit-redberet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security risks in your codebase, protecting against common vulnerabilities and preventing data breaches.

Core Features & Use Cases

  • Vulnerability Scanning: Checks for common security flaws like SQL injection, XSS, and insecure authentication.
  • Secret Detection: Scans for hardcoded secrets, API keys, and sensitive information.
  • Dependency Auditing: Identifies known vulnerabilities in project dependencies.
  • Use Case: Before deploying a new feature, run a security audit to ensure no secrets were accidentally committed and that the code adheres to OWASP best practices.

Quick Start

Run a security audit on the current project directory to find vulnerabilities and secrets.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and hardcoded secrets?▼

Scanning for security vulnerabilities before deployment checks for flaws like SQL injection, XSS, and broken authentication. It ensures no API keys or sensitive information were accidentally committed and that code adheres to OWASP best practices.

Does this security audit tool check for vulnerable dependencies in npm and pip?▼

Yes, dependency auditing identifies known vulnerabilities in project dependencies using tools like pip-audit and npm audit. It scans package manifests to ensure your project adheres to OWASP best practices and prevents data breaches.

What is the best way to detect sensitive data exposure in my source code?▼

The best way to detect sensitive data exposure is by running a vulnerability scan that searches for hardcoded secrets and API keys. It addresses insecure authentication and sensitive data exposure to protect against common data breaches.

Can I use this to find OWASP top 10 vulnerabilities like XSS and SQL injection?▼

Yes, the audit specifically addresses OWASP risks including injection flaws, XSS, and broken authentication. It utilizes scanning tools like bandit and grep to detect these common security vulnerabilities across your codebase.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
Harmitx7Harmitx7
3

vulnerability-scanner

Scan codebases for security vulnerabilities using OWASP Top 10 principles.

Community
Advanced
thiagoooo34252thiagoooo34252
1

engineer-ci-cd-pipeline

Configure CI/CD pipelines with quality gates and deployment strategies.

Community
Advanced
kaustubhhiwarekaustubhhiware

security-reviewer

Audit code and cloud configurations for security vulnerabilities.

Community
Advanced